PayoutsKING is a ransomware and extortion group that first emerged in April 2025. The group explicitly states it does not operate as a Ransomware-as-a-Service (RaaS) model and does not use affiliates, with its core actors directly conducting attacks. PayoutsKING is assessed with high confidence to be comprised of former BlackBasta affiliates, leveraging their prior social engineering tactics while introducing enhanced obfuscation and encryption capabilities. The group is financially motivated, employing a double extortion strategy that involves encrypting victim files and exfiltrating large volumes of data to pressure payment. A distinguishing characteristic is their rapid victim disclosure across diverse sectors and their claim of being a closed, independent operation, which sets them apart from the prevalent RaaS model in the ransomware landscape.

Aliases del actor

PK CrewPayout$KingPayouts_KINGpayoutskingPayoutsMafia

Actores similares

apt-hackingteamactor · 1Password Crackingactor · 1Blue Mockingbirdapt · 1iamthekingactor · 1the-whois-hacking-teamactor · 1black-kingdomactor · 1Hacking Teamapt · 0VIKING SPIDERapt · 0Viking Jackalapt · 0IMNCrewransomware · 2